General
-
Target
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8
-
Size
232KB
-
Sample
201109-xrhtqrpvex
-
MD5
b030e5eedf1f8b0937596da82fafe4df
-
SHA1
d665c5b5c5fad5918aedfee5ff9b79a74c25b25a
-
SHA256
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8
-
SHA512
001b2889317a09a8f504c0cff158088504bb3cf4276cd9cc32c56e2218bc790c9fde756d086d705ff66f2f918d975c4010f0c33d067c7fda716c9590dd39a10f
Static task
static1
Behavioral task
behavioral1
Sample
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8
-
Size
232KB
-
MD5
b030e5eedf1f8b0937596da82fafe4df
-
SHA1
d665c5b5c5fad5918aedfee5ff9b79a74c25b25a
-
SHA256
6cd6aacf5d6b0c139bc4c004589feea8de581453f21a1dfc814caea34ba66fb8
-
SHA512
001b2889317a09a8f504c0cff158088504bb3cf4276cd9cc32c56e2218bc790c9fde756d086d705ff66f2f918d975c4010f0c33d067c7fda716c9590dd39a10f
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-